This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/CyAy99lvFfxEeefYC3YDjAbci7s.roa File: CyAy99lvFfxEeefYC3YDjAbci7s.roa (raw, json) Hash identifier: kbK1HAU7102mQpjWbsfSJZ2xs2+GlLtaq/XWg70vXxc= Subject key identifier: 0B:20:32:F7:D9:6F:15:FC:44:79:E7:D8:0B:76:03:8C:06:DC:8B:BB Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Certificate serial: 019BBB641D38DB9053E91DE90483F88AF263 Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/CyAy99lvFfxEeefYC3YDjAbci7s.roa Signing time: Wed 14 Jan 2026 07:24:19 +0000 ROA not before: Wed 14 Jan 2026 07:24:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 11967 IP address blocks: 2a0d:d940:70::/44 maxlen: 48 2a0d:d940:75::/48 maxlen: 48 2a0d:d940:2002::/48 maxlen: 48 2a0d:d940:2004::/48 maxlen: 48 2a0d:d940:2006::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bb:64:1d:38:db:90:53:e9:1d:e9:04:83:f8:8a:f2:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Validity Not Before: Jan 14 07:24:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b2032f7d96f15fc4479e7d80b76038c06dc8bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:62:86:34:36:33:3c:28:7d:3d:b4:45:f0:33: ec:db:73:78:e7:b9:2c:1b:45:5d:36:d0:48:00:6a: 32:86:e7:ee:43:97:98:6d:15:81:c8:09:67:41:46: 06:05:9a:b4:1d:95:cc:af:ea:ce:b5:d7:ed:83:ac: 1e:a5:8b:94:24:05:10:d5:6d:76:4a:42:81:4a:dd: 65:53:12:81:f6:b2:a7:5a:c8:6f:a9:e7:2e:06:65: 51:bc:6e:44:9c:b7:a1:07:ca:dc:ae:e4:ec:8c:5d: 94:1e:94:33:bc:34:ea:18:f1:77:7c:43:df:3c:db: 70:00:c1:77:c4:6c:e3:bf:a8:a0:fe:a8:a5:de:56: 33:a4:b5:e2:2e:e6:dd:5b:a2:04:7b:24:21:e8:68: f4:52:02:7d:12:04:7d:b8:2c:54:95:ed:01:fd:a4: 01:39:5c:f8:59:7a:df:86:53:42:69:2d:fe:d4:d0: 84:02:37:43:b8:bc:04:36:44:ea:ad:d6:0e:78:ed: 84:01:d9:01:1e:48:b8:5c:dc:9a:69:f4:1e:88:3a: e0:3d:5c:fa:e2:9d:04:fd:98:ba:9d:65:0c:f4:db: 15:bf:d8:a1:7c:54:c6:cf:11:17:ed:d7:24:e8:52: c5:f2:fb:99:a8:69:f0:24:29:98:c4:44:08:68:09: 95:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:20:32:F7:D9:6F:15:FC:44:79:E7:D8:0B:76:03:8C:06:DC:8B:BB X509v3 Authority Key Identifier: keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/CyAy99lvFfxEeefYC3YDjAbci7s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:d940:70::/44 2a0d:d940:2002::/48 2a0d:d940:2004::/48 2a0d:d940:2006::/48 Signature Algorithm: sha256WithRSAEncryption b4:3c:18:c8:d8:52:64:41:5b:ba:31:8b:5c:e9:1d:cf:80:ba: 72:c3:07:a6:66:eb:59:56:6e:9d:58:76:a2:82:6e:7a:85:23: f8:a7:a8:d8:75:e1:6e:c4:78:ca:c4:b3:42:75:b8:28:32:bb: 39:3c:ff:8d:fb:96:a5:ac:c1:4f:0b:81:99:9c:9e:2b:da:36: 75:a1:cc:71:a6:66:53:c9:c6:7d:ad:63:19:6d:5f:70:3f:9c: d5:e1:30:7f:eb:12:9e:17:60:90:80:94:79:63:d6:e4:cb:4f: cf:d4:80:8d:06:c4:cd:a0:f5:5c:0a:f5:e2:5f:a3:d6:cb:b9: 19:b9:ee:30:12:24:80:12:c1:d1:a5:fd:99:27:b7:26:52:b0: b7:86:03:11:56:16:14:17:53:0c:10:32:e7:28:b1:f4:e9:90: e4:d5:d8:83:9b:53:81:d0:b3:b1:28:35:84:c3:58:a2:83:b3: 7f:f6:63:e8:07:35:62:6c:94:85:49:0e:18:ac:0a:4c:78:93: 3c:11:c9:49:13:39:e8:c4:32:38:b0:bb:54:05:7c:16:c0:bb: 08:9a:23:8c:17:bb:79:e4:b3:46:2c:87:13:18:3c:0a:a5:90: fa:ef:30:fd:c3:7d:c1:22:5e:20:29:2f:b6:2f:d4:13:4c:7d: 70:5e:76:8e -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZu7ZB0425BT6R3pBIP4ivJjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj YmJjNzQwHhcNMjYwMTE0MDcyNDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjIwMzJmN2Q5NmYxNWZjNDQ3OWU3ZDgwYjc2MDM4YzA2ZGM4YmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGKGNDYzPCh9PbRF8DPs23N457ks G0VdNtBIAGoyhufuQ5eYbRWByAlnQUYGBZq0HZXMr+rOtdftg6wepYuUJAUQ1W12 SkKBSt1lUxKB9rKnWshvqecuBmVRvG5EnLehB8rcruTsjF2UHpQzvDTqGPF3fEPf PNtwAMF3xGzjv6ig/qil3lYzpLXiLubdW6IEeyQh6Gj0UgJ9EgR9uCxUle0B/aQB OVz4WXrfhlNCaS3+1NCEAjdDuLwENkTqrdYOeO2EAdkBHki4XNyaafQeiDrgPVz6 4p0E/Zi6nWUM9NsVv9ihfFTGzxEX7dck6FLF8vuZqGnwJCmYxEQIaAmV2QIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFAsgMvfZbxX8RHnn2At2A4wG3Iu7MB8GA1UdIwQY MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt MTRkMjM4NTI3ODM1LzEvQ3lBeTk5bHZGZnhFZWVmWUMzWURqQWJjaTdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1 LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcEKg3ZQABw AwcAKg3ZQCACAwcAKg3ZQCAEAwcAKg3ZQCAGMA0GCSqGSIb3DQEBCwUAA4IBAQC0 PBjI2FJkQVu6MYtc6R3PgLpywwemZutZVm6dWHaigm56hSP4p6jYdeFuxHjKxLNC dbgoMrs5PP+N+5alrMFPC4GZnJ4r2jZ1ocxxpmZTycZ9rWMZbV9wP5zV4TB/6xKe F2CQgJR5Y9bky0/P1ICNBsTNoPVcCvXiX6PWy7kZue4wEiSAEsHRpf2ZJ7cmUrC3 hgMRVhYUF1MMEDLnKLH06ZDk1diDm1OB0LOxKDWEw1iig7N/9mPoBzVibJSFSQ4Y rApMeJM8EclJEznoxDI4sLtUBXwWwLsImiOMF7t55LNGLIcTGDwKpZD67zD9w33B Il4gKS+2L9QTTH1wXnaO -----END CERTIFICATE-----Generated at Wed Jan 21 16:57:13 2026 by rpki-client